Attackers Can Execute Arbitrary OS Commands on Mesh Wi-Fi Router RP562B Due to OS Command Injection Vulnerability

CVE-2024-45827

What is CVE-2024-45827?

A vulnerability exists in the Mesh Wi-Fi router RP562B due to improper neutralization of special elements used in OS commands, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. This issue is present in firmware version v1.0.2 and earlier. Exploiting this vulnerability could lead to unauthorized access and potential manipulation of the device, compromising the overall network security. It is essential for users and network administrators to apply necessary updates and mitigate this security risk.

References